105.112.96.7 - IPInfo

基本信息:

城市(city): Benin City

省份(region): Edo

国家(country): Nigeria

运营商(isp): Airtel Networks Limited

主机名(hostname): unknown

机构(organization): Celtel Nigeria Limited t.a ZAIN

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	TCP port 445 (SMB) attempt blocked by firewall. [2019-07-10 10:45:05]	2019-07-11 00:17:40

相同子网IP讨论:

IP	类型	评论内容	时间
105.112.96.33	attackspambots	xmlrpc attack	2020-06-04 02:22:29
105.112.96.71	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 24-03-2020 18:30:18.	2020-03-25 04:44:47
105.112.96.42	attackbots	Unauthorised access (Feb 9) SRC=105.112.96.42 LEN=52 TOS=0x10 TTL=114 ID=17315 DF TCP DPT=445 WINDOW=8192 SYN	2020-02-10 01:24:44
105.112.96.19	attackspam	Unauthorized connection attempt from IP address 105.112.96.19 on Port 445(SMB)	2019-11-10 05:06:38
105.112.96.22	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 18:43:43,725 INFO [shellcode_manager] (105.112.96.22) no match, writing hexdump (693df5215b87095b873fc3e16fd59056 :2080395) - MS17010 (EternalBlue)	2019-07-05 23:10:19

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 105.112.96.7
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10213
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;105.112.96.7.			IN	A

;; AUTHORITY SECTION:
.			3245	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071000 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 11 00:17:26 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 7.96.112.105.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 7.96.112.105.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
158.69.112.95	attackbots	[ssh] SSH attack	2019-08-31 13:13:00
51.255.35.41	attackspam	Aug 30 18:38:31 eddieflores sshd\[6300\]: Invalid user hjz from 51.255.35.41 Aug 30 18:38:31 eddieflores sshd\[6300\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.ip-51-255-35.eu Aug 30 18:38:32 eddieflores sshd\[6300\]: Failed password for invalid user hjz from 51.255.35.41 port 43148 ssh2 Aug 30 18:42:25 eddieflores sshd\[6730\]: Invalid user davalan from 51.255.35.41 Aug 30 18:42:25 eddieflores sshd\[6730\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.ip-51-255-35.eu	2019-08-31 12:51:00
182.61.132.165	attackspambots	Aug 31 01:31:45 game-panel sshd[12135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.132.165 Aug 31 01:31:47 game-panel sshd[12135]: Failed password for invalid user jasmine from 182.61.132.165 port 58322 ssh2 Aug 31 01:34:39 game-panel sshd[12235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.132.165	2019-08-31 13:23:52
51.38.150.104	attackbotsspam	$f2bV_matches_ltvn	2019-08-31 13:00:31
106.12.196.28	attackbots	Aug 31 03:35:59 cp sshd[601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.196.28 Aug 31 03:35:59 cp sshd[601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.196.28	2019-08-31 13:07:24
106.13.195.139	attack	Aug 31 06:52:39 meumeu sshd[15224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.195.139 Aug 31 06:52:41 meumeu sshd[15224]: Failed password for invalid user foswiki from 106.13.195.139 port 45344 ssh2 Aug 31 06:56:15 meumeu sshd[15667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.195.139 ...	2019-08-31 13:18:31
67.85.105.1	attack	Aug 30 18:49:06 wbs sshd\[21098\]: Invalid user oliver from 67.85.105.1 Aug 30 18:49:06 wbs sshd\[21098\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ool-43556901.dyn.optonline.net Aug 30 18:49:07 wbs sshd\[21098\]: Failed password for invalid user oliver from 67.85.105.1 port 51782 ssh2 Aug 30 18:53:21 wbs sshd\[21425\]: Invalid user word from 67.85.105.1 Aug 30 18:53:21 wbs sshd\[21425\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ool-43556901.dyn.optonline.net	2019-08-31 12:58:05
81.22.45.204	attack	Aug 31 03:36:04 lumpi kernel: INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.204 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=31468 PROTO=TCP SPT=48192 DPT=11222 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-08-31 12:53:46
123.15.58.162	attackspambots	Aug3102:52:08server2dovecot:imap-login:Disconnected$authfailed\,1attemptsin8secs$:user=\\,method=PLAIN\,rip=196.218.89.88\,lip=81.17.25.230\,TLS\,session=\Aug3103:27:14server2dovecot:imap-login:Disconnected$authfailed\,1attemptsin6secs$:user=\\,method=PLAIN\,rip=177.19.185.235\,lip=81.17.25.230\,TLS\,session=\Aug3102:38:44server2dovecot:imap-login:Disconnected$authfailed\,1attemptsin6secs$:user=\\,method=PLAIN\,rip=121.28.40.179\,lip=81.17.25.230\,TLS:Connectionclosed\,session=\Aug3103:35:25server2dovecot:imap-login:Disconnected$authfailed\,1attemptsin5secs$:user=\\,method=PLAIN\,rip=218.28.164.218\,lip=81.17.25.230\,TLS:Connectionclosed\,session=\<6I1vwF R6OzaHKTa\>Aug3103:16:30server2dovecot:imap-login:Disconnected$authfailed\,1attemptsin14secs$:user=\\,method=PLAIN\,rip=112.91.58.238\,lip=81.17.25.230\,	2019-08-31 13:45:14
206.189.30.229	attack	Aug 31 04:41:18 hcbbdb sshd\[23653\]: Invalid user postgres from 206.189.30.229 Aug 31 04:41:18 hcbbdb sshd\[23653\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.30.229 Aug 31 04:41:19 hcbbdb sshd\[23653\]: Failed password for invalid user postgres from 206.189.30.229 port 36094 ssh2 Aug 31 04:45:31 hcbbdb sshd\[24105\]: Invalid user mc from 206.189.30.229 Aug 31 04:45:31 hcbbdb sshd\[24105\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.30.229	2019-08-31 12:52:15
111.21.99.227	attack	Aug 31 07:00:30 dedicated sshd[4577]: Invalid user asl from 111.21.99.227 port 41256	2019-08-31 13:17:26
45.58.139.84	attackbotsspam	MagicSpam Rule: Excessive Mail Rate Inbound; Spammer IP: 45.58.139.84	2019-08-31 12:59:06
139.99.37.130	attackspambots	Aug 31 07:08:45 legacy sshd[7977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.37.130 Aug 31 07:08:47 legacy sshd[7977]: Failed password for invalid user ema from 139.99.37.130 port 4550 ssh2 Aug 31 07:13:44 legacy sshd[8086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.37.130 ...	2019-08-31 13:15:53
51.68.122.190	attackbots	Aug 31 05:02:16 unicornsoft sshd\[8727\]: User root from 51.68.122.190 not allowed because not listed in AllowUsers Aug 31 05:02:16 unicornsoft sshd\[8727\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.122.190 user=root Aug 31 05:02:17 unicornsoft sshd\[8727\]: Failed password for invalid user root from 51.68.122.190 port 48611 ssh2	2019-08-31 13:47:40
201.76.70.46	attackspam	Aug 31 07:04:24 vps647732 sshd[31321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.76.70.46 Aug 31 07:04:26 vps647732 sshd[31321]: Failed password for invalid user zq from 201.76.70.46 port 43292 ssh2 ...	2019-08-31 13:09:54

最近上报的IP列表

195.100.84.50	151.211.193.152	113.236.109.198	188.86.199.205
42.124.171.84	114.237.109.230	157.206.161.44	183.8.153.8
62.32.93.185	178.198.123.181	2002:dff3:80d5::dff3:80d5	41.215.129.145
180.113.99.48	194.131.21.59	67.169.168.94	179.204.103.194
1.209.179.141	204.136.110.224	223.18.105.85	116.12.153.63